Legal

Your Data and Rights

What you can ask us to do with your data, how to ask, and what happens if we get it wrong.

This page is not final. 2 details are still to be confirmed, and it has not yet been reviewed by legal counsel. It is published so it can be checked, not relied upon.

1. What you can ask for

Under India's Digital Personal Data Protection Act, you have these rights over the data we hold about you. They are not conditional on where you live, and you do not have to give a reason for exercising any of them.

  • See what we hold. A summary of your personal data, what we are doing with it, and who else we have shared it with.
  • Correct it. Have anything inaccurate corrected, anything misleading updated, and anything incomplete completed.
  • Have it erased. Have your data deleted, unless we are required by law to keep it.
  • Withdraw your consent. As easily as you gave it. Withdrawing does not undo processing that already happened, and it does not make what you agreed to at the time invalid.
  • Nominate someone. Name another person to exercise these rights on your behalf if you die or become unable to.
  • Complain. To us first, and then to the Data Protection Board of India if we have not resolved it.

2. Things you can do yourself, right now

Two of these do not need us at all, and are faster without us.

  • Delete an individual result from your dashboard. Deleting it removes the answers with it.
  • Clear your site data in your browser to remove everything stored locally, including your cookie choice. See the Cookie Policy.

3. How to make a request

Email grievance@calmtree.in from the address on your account, and say which of the things in section 1 you want. Writing from the account address is how we know it is you; if you cannot, we will ask for something else that establishes it, and we will ask for as little as will do.

We respond within 30 days. If a request is going to take longer, we will tell you before that runs out rather than after.

There is no charge. If a request is repeated so often that answering it stops being reasonable, we will say so and explain why rather than quietly ignoring it.

4. If your employer sent you the assessment

Your individual answers and result belong to you and are never shown to your employer. Your employer sees group-level summaries only, and only where enough people responded for the group to stay anonymous.

Once your response has been combined into a group summary, it cannot be pulled back out of it: the summary is a set of numbers with no individual responses inside it, which is the property that makes it anonymous in the first place. You can still ask us to delete your individual response, and we will. Organisation responses are kept for 24 months, or until the organisation's account closes.

5. Grievance officer

If something has gone wrong, this is the named person responsible for putting it right.

Alok Jha

Grievance Officer and Data Protection Contact, Calmtree Pvt Ltd

Email: grievance@calmtree.in

Phone: to be confirmed before launch

Address: to be confirmed before launch

We acknowledge a grievance within 15 days and aim to resolve it within 30 days.

6. If we do not resolve it

You can complain to the Data Protection Board of India. You do not need our permission to do so, and you do not have to wait for us to finish if we have missed the timescales above.